Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/4tuSAatfiu27LQ7HsxX4iVOamW8.roa
File:                     4tuSAatfiu27LQ7HsxX4iVOamW8.roa (raw, json)
Hash identifier:          LC3GSnMpUMtDVphzngNTWLd5TkWL/GBAtQWlZCXzqAU=
Subject key identifier:   E2:DB:92:01:AB:5F:8A:ED:BB:2D:0E:C7:B3:15:F8:89:53:9A:99:6F
Certificate issuer:       /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial:       01825D817C10B5E89BB347AF5D6FB9496400
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/4tuSAatfiu27LQ7HsxX4iVOamW8.roa
Signing time:             Tue 02 Aug 2022 07:42:23 +0000
ROA not before:           Tue 02 Aug 2022 07:42:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49981
IP address blocks:        185.65.200.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:5d:81:7c:10:b5:e8:9b:b3:47:af:5d:6f:b9:49:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
        Validity
            Not Before: Aug  2 07:42:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e2db9201ab5f8aedbb2d0ec7b315f889539a996f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f6:38:58:5f:aa:43:96:ba:b8:38:59:df:26:
                    3c:3f:47:19:89:ad:74:e5:31:74:9f:23:07:08:4b:
                    54:8c:f5:d3:d1:0d:0c:9f:bb:42:11:88:a3:d8:97:
                    17:ae:95:1a:39:53:62:0e:c0:c9:4f:20:2a:8e:0e:
                    2c:0b:7e:d0:53:d6:04:4e:d5:82:ff:65:d6:cc:cd:
                    2a:6d:f0:f2:4a:2b:7b:41:39:5f:9c:50:c7:d1:31:
                    85:67:b0:05:1b:29:f1:a2:13:64:34:01:ab:b2:5d:
                    72:bc:00:47:6a:3c:75:dc:87:4a:fa:60:4a:43:13:
                    cc:3c:05:a9:d6:a8:a7:31:d4:86:28:7c:8a:ad:84:
                    58:bc:3a:15:40:d9:65:37:c0:51:07:62:e2:76:a8:
                    3e:88:a6:63:41:df:db:00:7a:81:ab:98:2b:4f:dd:
                    9e:e7:18:63:0f:3d:52:97:d9:fe:35:2f:50:4d:a5:
                    eb:46:02:df:c3:fc:b8:a4:10:a0:ab:ff:98:82:95:
                    2f:0c:66:66:82:0e:68:18:b5:0b:d0:cb:7a:1b:33:
                    a0:41:02:6c:53:51:64:9b:39:8a:ce:91:ec:d2:c9:
                    0b:01:ed:f8:68:16:99:ec:0f:77:6a:ad:26:21:f5:
                    09:25:6f:eb:81:c9:f1:18:78:86:89:ea:86:0f:b3:
                    cf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DB:92:01:AB:5F:8A:ED:BB:2D:0E:C7:B3:15:F8:89:53:9A:99:6F
            X509v3 Authority Key Identifier:
                keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/4tuSAatfiu27LQ7HsxX4iVOamW8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.65.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:1b:39:90:05:7a:28:df:2a:97:f5:ab:08:c2:1f:76:31:2a:
         9b:86:63:cd:5a:84:7e:10:4a:bd:b6:95:46:00:5a:bd:70:b9:
         36:e6:9d:20:6a:7a:e9:fc:ce:3b:36:6b:53:c3:45:9b:8c:a6:
         10:9e:44:9a:dc:ee:08:51:94:ed:31:18:89:07:ac:8f:0d:a3:
         cf:87:d4:f4:ce:d8:3c:b2:5a:d4:7a:a9:55:64:16:c2:fd:e6:
         83:d4:90:9f:61:c0:41:36:b8:30:a1:dc:a6:d6:0a:96:5f:68:
         b9:eb:96:05:db:be:48:c6:b7:3f:a9:ee:be:28:4f:4a:5a:67:
         38:43:88:87:78:f9:c8:ea:fb:5b:81:e5:5d:fa:9f:4a:56:7b:
         99:71:5e:1e:10:72:5c:86:7a:6d:16:64:36:4f:93:7a:d8:11:
         d3:9a:23:d9:39:a3:ca:d0:6a:45:f3:ce:49:17:a0:8b:3d:91:
         08:b6:0f:0e:2d:bb:d9:83:87:a5:24:f4:ce:8d:86:44:f5:99:
         c1:cf:42:26:9f:ae:31:4a:f1:bd:87:cf:81:08:ca:00:9e:8c:
         c3:16:f1:47:ce:f4:64:e7:2d:32:74:46:e2:1d:2e:42:67:e2:
         fc:99:d8:63:78:33:b3:a2:a4:44:6f:90:ca:b4:6b:c8:b3:3a:
         6f:e2:3c:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJdgXwQteibs0evXW+5SWQAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm
YmViOWEwHhcNMjIwODAyMDc0MjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmRiOTIwMWFiNWY4YWVkYmIyZDBlYzdiMzE1Zjg4OTUzOWE5OTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fY4WF+qQ5a6uDhZ3yY8P0cZia10
5TF0nyMHCEtUjPXT0Q0Mn7tCEYij2JcXrpUaOVNiDsDJTyAqjg4sC37QU9YETtWC
/2XWzM0qbfDySit7QTlfnFDH0TGFZ7AFGynxohNkNAGrsl1yvABHajx13IdK+mBK
QxPMPAWp1qinMdSGKHyKrYRYvDoVQNllN8BRB2Lidqg+iKZjQd/bAHqBq5grT92e
5xhjDz1Sl9n+NS9QTaXrRgLfw/y4pBCgq/+YgpUvDGZmgg5oGLUL0Mt6GzOgQQJs
U1FkmzmKzpHs0skLAe34aBaZ7A93aq0mIfUJJW/rgcnxGHiGieqGD7PPOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOLbkgGrX4rtuy0Ox7MV+IlTmplvMB8GA1UdIwQY
MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt
NmE0ZWNhZjhiM2IxLzEvNHR1U0FhdGZpdTI3TFE3SHN4WDRpVk9hbVc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix
LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUHIMA0G
CSqGSIb3DQEBCwUAA4IBAQAwGzmQBXoo3yqX9asIwh92MSqbhmPNWoR+EEq9tpVG
AFq9cLk25p0ganrp/M47NmtTw0WbjKYQnkSa3O4IUZTtMRiJB6yPDaPPh9T0ztg8
slrUeqlVZBbC/eaD1JCfYcBBNrgwodym1gqWX2i565YF275Ixrc/qe6+KE9KWmc4
Q4iHePnI6vtbgeVd+p9KVnuZcV4eEHJchnptFmQ2T5N62BHTmiPZOaPK0GpF885J
F6CLPZEItg8OLbvZg4elJPTOjYZE9ZnBz0Imn64xSvG9h8+BCMoAnozDFvFHzvRk
5y0ydEbiHS5CZ+L8mdhjeDOzoqREb5DKtGvIszpv4jyf
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:35 2024 by rpki-client on console-fra.rpki-client.org